Lucene search

K
freebsdFreeBSD184AB9E0-64CD-11D9-9E1E-C296AC722CB3
HistoryJan 11, 2005 - 12:00 a.m.

squid -- buffer overflow vulnerability in gopherToHTML

2005-01-1100:00:00
vuxml.freebsd.org
24

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.929 High

EPSS

Percentile

99.0%

The squid patches page notes:

A malicious gopher server may return a response with very
long lines that cause a buffer overflow in Squid.
Workaround: Since gopher is very obscure these days, do
not allow Squid to any gopher servers. Use an ACL rule
like:
acl Gopher proto gopher
http_access deny Gopher

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchsquid< 2.5.7_6UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.929 High

EPSS

Percentile

99.0%